News for hackers. Stuff that matters.

A comment on Shutting down our unencrypted public DNS service. Parent comment

Re:Shutting down our unencrypted public DNS service by qa-tari on Tuesday December 13, 2022 @10:48AM (#33970398)
Combining encrypted DNS and TLS 1.3 with encrypted handshakes, there's a reasonable cause for deniability which service you have accessed even if you can never hide the resolved IP address.
[ Parent | on HN ]
Re:Shutting down our unencrypted public DNS service by Avamander on Tuesday December 13, 2022 @11:42AM (#33971331)
Even better would be to use ODoH(3), that way not even your local resolver can know who resolved what. Let's just hope TLS ECH and the rest takes off before the legislation against it.
[ Parent | on HN ]
Re:Shutting down our unencrypted public DNS service by jedisct1 on Tuesday December 13, 2022 @02:39PM (#33974559)
Or anonymized DNSCrypt, which is far more deployed and reliable.
[ Parent | on HN ]
Re:Shutting down our unencrypted public DNS service by Avamander on Tuesday December 13, 2022 @05:58PM (#33977450)
More deployed and reliable, right now. The possibility of blending in with all the rest of H/3 traffic alone is a good reason to work on (O)DoH3.
[ Parent | on HN ]